PT-2026-27166 · Erupts · Erupts

Vuldb + 1 · Published 2026-03-23 · Updated 2026-03-23 · CVE-2026-4594

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions erupts versions through 1.13.3

Description A flaw exists in the geneEruptHqlOrderBy function located in the file erupt-data/erupt-jpa/src/main/java/xyz/erupt/jpa/dao/EruptJpaUtils.java. Manipulation of the sort.field argument can lead to a SQL injection vulnerability within Hibernate. This issue is remotely exploitable. The exploit has been publicly disclosed. The vendor was notified but did not respond.

Recommendations Versions prior to 1.13.3 should be updated. As a temporary workaround, consider restricting or disabling the use of the geneEruptHqlOrderBy function until a patch is available. Avoid using the sort.field parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-564

CWE-89

Related Identifiers

CVE-2026-4594

Affected Products

Erupts

References · 5

• 🔥 https://fx4tqqfvdw4.feishu.cn/docx/ETWUdbPk1oCC56xoEWHc3Q28nEc?from=from_copylink · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4594 · Security Note
• https://vuldb.com/?id.352431 · Note
• https://vuldb.com/?submit.775594 · Note
• https://vuldb.com/?ctiid.352431 · Note